The newest Supply Chain Security resources are on the Supply Chain Security page. For a reading order instead of a date order, see the Supply Chain Security learning path.
| Date Added | Link | Excerpt |
|---|---|---|
| 2026-05-27 2026 | TeamPCP Compromised LiteLLM in AI Supply Chain Attack news 4 min read | Library compromising LiteLLM through an AI supply chain attack involved poisoning the Trivy scanner to steal CI/CD tokens, enabling the publication of malicious LiteLLM packages to PyPI. These packages used source injection and stealthy .pth file execution to harvest credentials for OpenAI, Anthropic, Azure, AWS, and Kubernetes, highlighting risks in AI infrastructure and developer pipelines. → esecurityplanet.com |
| 2026-05-26 2026 | Socket Raises $60M for Wider Software Supply-Chain Defense news 4 min read | Library for securing software supply chains, Socket provides protection for developer endpoints, AI ecosystems, browser extensions, and editor plug-ins. It addresses the growing threat of malicious packages and dependencies introduced by AI development tools and open-source packages, offering features like Socket Firewall to block threats before they reach pipelines. The company has secured $60 million in funding to expand its security controls across broader software ecosystems and enhance its human-vetted threat analysis capabilities. → bankinfosecurity.com |
| 2026-05-26 2026 | Well-architected best practices for software supply chain security beginner 11 min read | Reference for software supply chain security best practices, aligned with the AWS Well-Architected Framework. This document details techniques to mitigate risks from compromised maintainer accounts and malicious package downloads, referencing incidents like Shai-Hulud and the exploitation of npm packages. Key recommendations include using temporary credentials, enforcing least privilege access, implementing multi-factor authentication, and utilizing artifact signing with services like AWS Signer to create defense-in-depth strategies. → aws.amazon.com |
| 2026-05-26 2026 | Why Are Software Supply Chains Under Constant Siege? beginner 7 min read | Library for securing software supply chains, addressing risks from AI-generated code, compromised dependencies like those in npm, and manipulated CI/CD pipelines. It highlights how AI accelerates development while also enabling sophisticated, autonomous attacks, evolving vulnerability discovery and exploitation. The library targets common attack vectors including open-source vulnerabilities, malicious packages, compromised maintainers, secrets, and developer environments, recognizing trust as a primary exploitable element. → paloaltonetworks.com |
| 2026-05-26 2026 | Why developer machines are now the number one target for supply chain attacks beginner 5 min read | Library providing enhanced security for developer machines, addressing the growing threat of supply chain attacks targeting workstations. It extends visibility beyond package registries to include IDE extensions, browser plugins, and AI tools, offering granular telemetry to detect and prevent vulnerabilities before they impact production. Examples mentioned include attacks via malicious VS Code extensions, Trivy, and compromised packages, highlighting the limitations of traditional EDR tools in monitoring developer environments. → aikido.dev |
| 2026-05-26 2026 | Perplexity Bumblebee Stops Dangerous Supply-Chain Attacks news 2 min read | Library for auditing local developer environments, Perplexity Bumblebee scans lockfiles and manifests directly to identify supply-chain risks without executing code. It addresses the gap left by SBOMs and EDRs, particularly concerning post-install scripts within packages like those affecting TanStack and SAP, and auditable MCP configurations for AI tools like Cursor and Claude Desktop. Bumblebee is a zero-dependency, read-only binary suitable for startups, solo developers, and enterprises to prevent unnoticed pipeline spread. |
| 2026-05-26 2026 | TrapDoor Supply Chain Attack Actively Exploiting npm PyPI and CratesIO to Steal Developer Credentials in Crypto DeFi Solana and AI Sectors news 5 min read | Library of tools and techniques for detecting and mitigating the TrapDoor supply chain attack, which actively exploits npm, PyPI, and CratesIO packages to steal developer credentials. This sophisticated campaign targets the crypto, DeFi, Solana, and AI sectors, leveraging malicious packages to exfiltrate AWS keys, GitHub tokens, SSH keys, and cryptocurrency wallet secrets. TrapDoor also uniquely abuses AI coding assistants by embedding hidden instructions in `.cursorrules` and `CLAUDE.md` files, tricking tools into exfiltrating secrets. Mitigation involves auditing dependencies, rotating credentials, searching for persistence artifacts like cron jobs and Git hooks, and monitoring for suspicious network traffic. → rescana.com |
| 2026-05-25 2026 | Automated 'Megalodon' Campaign Spreads GitHub Repo Backdoors news 4 min read | Library of GitHub Actions workflows that spread the 'Megalodon' campaign, targeting over 5,000 repositories. This automated attack injects base64-encoded bash payloads via forged author identities, stealing CI/CD secrets, cloud credentials, and SSH keys. Variants include 'SysDiag' and 'Optimize-Build,' with affected repositories needing commit reverts, secret rotation, and audit log reviews, particularly for OIDC federation. → govinfosecurity.com |
| 2026-05-25 2026 | Who is TeamPCP the rising hacker group targeting open-source software and AI tools? news 4 min read | Writeup on TeamPCP, a hacker group executing software supply chain attacks. They have targeted entities like GitHub, OpenAI, and Mercor, exploiting vulnerabilities in tools like VSCode extensions, Next.js, and Trivy to deploy malware and steal credentials. TeamPCP utilizes worms like 'Mini Shai-Hulud' to automate its operations, aiming for financial gain through ransomware and data extortion. Their tactics involve corrupting open-source software and AI tools, impacting hundreds of companies and raising concerns about secure development practices. |
| 2026-05-25 2026 | Socket Uncovers Supply Chain Attack on Cryptocurrency and AI Developers news 2 min read | Analysis of the TrapDoor supply chain attack reveals a sophisticated campaign targeting developers across npm, PyPI, and Crates.io. The malware, distributed via GitHub, infiltrates systems by masquerading as helpful developer tools, stealing sensitive data like wallet credentials, API keys, and browser extension information from popular services including Coinbase, Binance, and MetaMask. It specifically targets AI programming assistants like Claude and Cursor, aiming to trick them into executing workflows that expose secrets. Persistence mechanisms are employed via scheduler tasks and autostart, meaning simple removal is insufficient, necessitating comprehensive key rotation and system compromise checks. |
| 2026-05-25 2026 | Over 5500 GitHub Repositories Infected in Megalodon Supply Chain Attack news 2 min read | Writeup on the Megalodon supply chain attack, which infected over 5,500 GitHub repositories. The campaign leveraged malicious GitHub Actions workflows to steal credentials, keys, and tokens. Attackers injected over 5,700 commits within a six-hour window, deploying payloads to exfiltrate sensitive information like AWS, GCP, and Azure credentials, as well as SSH keys. The attack was discovered following the identification of compromised Tiledesk NPM packages. → securityweek.com |
| 2026-05-25 2026 | TrapDoor Supply Chain Attack Spreads Credential-Stealing Malware via npm PyPI and CratesIO news 3 min read | Library detailing the TrapDoor supply chain attack campaign that spread credential-stealing malware across npm, PyPI, and Crates.io. This coordinated campaign utilized malicious packages like `async-pipeline-builder` and `cryptowallet-safety`, employing techniques such as `trap-core.js` JavaScript payloads, Rust `build.rs` scripts, Python import-time execution, and the unusual tactic of implanting hidden instructions in `.cursorrules` and `CLAUDE.md` files to trick AI assistants. The attack targeted developers in crypto, DeFi, Solana, and AI, aiming to steal secrets, wallets, and credentials, with persistence achieved via cron jobs, systemd, Git hooks, and SSH. → thehackernews.com |
| 2026-05-24 2026 | Megalodon Supply Chain Attack: TeamPCP Compromises 5561 GitHub Repositories via Malicious CI/CD Workflows news 4 min read | Library detailing the Megalodon campaign, a supply chain attack by TeamPCP that compromised 5,561 GitHub repositories via malicious CI/CD workflows. The attack leveraged compromised developer credentials, injecting bash scripts that exfiltrated secrets like AWS and Azure credentials, SSH keys, and OIDC tokens to a C2 server. Variants included SysDiag and Optimize-Build workflows, and attackers also published malicious npm packages impersonating the Polymarket project, demonstrating worm-like propagation and reaching targets in Iran and Israel. → rescana.com |
| 2026-05-24 2026 | Active Exploitation Alert: Laravel Lang PHP Packages Compromised in Supply Chain Attack to Deploy Credential-Stealing Malware news 5 min read | Writeup on a supply chain attack targeting Laravel Lang PHP localization packages (laravel-lang/lang, laravel-lang/attributes, laravel-lang/http-statuses, laravel-lang/actions) which deployed credential-stealing malware. Attackers exploited GitHub version tagging to inject malicious code, impacting developers by exfiltrating cloud provider keys, developer secrets, browser passwords, and cryptocurrency wallets via a PHP dropper and secondary payload communicating with flipboxstudio[.]info. → rescana.com |
| 2026-05-23 2026 | npm Adds 2FA-Gated Publishing and Package Install Controls Against Supply Chain Attacks news 1 min read | Library enabling staged publishing for npm packages, requiring 2FA approval before release to mitigate supply chain attacks. It introduces "npm stage publish" via npm CLI 11.15.0+, demanding maintainer verification for every publish, including CI/CD and OIDC workflows. New install flags—`--allow-file`, `--allow-remote`, `--allow-directory`—provide granular control over non-registry installation sources, mirroring allowlist approaches. → thehackernews.com |
| 2026-05-23 2026 | Laravel-Lang Supply Chain Attack: Every Tag Across Multiple Composer Packages Rewritten to Steal CI Secrets news 7 min read | Writeup of the laravel-lang supply chain attack where a single actor rewrote all git tags across four popular Composer packages, including `laravel-lang/lang` and `laravel-lang/http-statuses`, to point to malicious commits. These commits added `src/helpers.php` to the `autoload.files` map, executing a payload upon application startup. The payload contacted `flipboxstudio.info`, dropped a PHP loader and ELF binary in `/tmp`, exfiltrated runner environment data, and then self-deleted. This technique bypassed standard version pinning, making pre-May 22, 2026 commit SHAs the only safe option. → stepsecurity.io |
| 2026-05-23 2026 | Laravel-Lang PHP Packages Compromised to Deliver Cross-Platform Credential Stealer news 3 min read | Library: The `laravel-lang/lang`, `laravel-lang/http-statuses`, `laravel-lang/attributes`, and `laravel-lang/actions` PHP packages were compromised in a supply chain attack. Malicious code embedded in version tags, specifically `src/helpers.php`, automatically executed on application startup. This dropper delivered a cross-platform credential-stealing payload capable of harvesting data from cloud environments, cryptocurrency wallets, browsers, password managers, and various application configurations. The stealer encrypts exfiltrated data with AES-256 and deletes itself from the disk. → thehackernews.com |
| 2026-05-23 2026 | How Koi Protects Against Developer Supply Chains beginner 4 min read | Library designed for Agentic Endpoint Security (AES) to protect against developer supply chain attacks. It addresses vulnerabilities exploited in the TeamPCP attack on the Nx Console VS Code extension, which leveraged trusted infrastructure abuse, invisible payloads in orphan commits, and credential harvesting. Koi provides frictionless visibility, proactive extension monitoring, and verified update rollouts to neutralize threats before they compromise sensitive data like Vault tokens, AWS metadata, and GitHub tokens, offering a modern alternative to legacy EDR solutions. → paloaltonetworks.com |
| 2026-05-23 2026 | Supply Chain Attack Targets Laravel-Lang Packages with Credential Stealer news 4 min read | Library detecting a supply chain attack targeting Laravel-Lang packages, where malicious version tags pointed to a fork containing credential-stealing code. This malware, delivered via composer's autoloader, collects AWS, GCP, Azure, and other cloud credentials, infrastructure secrets, developer keys, browser passwords, cryptocurrency wallet files, and VPN configurations. The attack was reported to Packagist and Aikido provides detection and prevention tools, including Aikido Safe Chain for intercepting package installations. → aikido.dev |
| 2026-05-22 2026 | TeamPCP Strikes (again): How a Trojan VS Code Extension Brought Down GitHub intermediate 3 min read | Library detailing the Nx Console VS Code extension compromise, where a trojanized version (18.95.0) was published, allowing TeamPCP to exfiltrate data from GitHub internal repositories. The extension silently executed a malicious package, `nx-next`, which stole GitHub tokens, npm credentials, AWS keys, Vault secrets, SSH keys, and other sensitive information through multiple exfiltration channels including HTTPS, the GitHub API, and DNS tunneling. → ox.security |
| 2026-05-22 2026 | India's AI surge exposes software supply chain security gaps news 5 min read | Library for assessing software supply chain security gaps, particularly relevant to India's AI adoption. The resource highlights challenges in detecting malicious npm packages (up 451% in 2025) and the impact of 48,000+ new CVEs disclosed globally in 2025, partly from AI-generated code introducing vulnerabilities like SQL injection. It details how AI necessitates a shift from code creation to validation, with DevSecOps teams spending 51% of their time reviewing AI-generated code. Model registries, like Hugging Face's 1.4 million new artifacts in 2025, represent a growing attack surface, with identified malicious AI models containing payloads for credential harvesting and command execution. |
| 2026-05-21 2026 | 5 Supply Chain Attacks in 48 Hours: Why Securing One Layer Is Not Enough beginner 10 min read | Library for securing the software supply chain, this resource details five distinct attacks in 48 hours targeting VS Code extensions, GitHub Actions, npm packages, and PyPI. It highlights how traditional tools like SCA and SAST fall short, failing to monitor CI/CD runtime or developer machines. The library offers runtime security for CI/CD, visibility into developer workstations, and ecosystem-wide threat intelligence to address these multi-layered threats. → stepsecurity.io |
| 2026-05-21 2026 | Mini Shai Hulud: Compromised @antv npm packages enable CI/CD credential theft news 8 min read | Library for detecting and mitigating the Mini Shai Hulud supply chain attack, which compromised @antv npm packages. This attack used obfuscated JavaScript to steal credentials from GitHub Actions, AWS, HashiCorp Vault, npm, Kubernetes, and 1Password. The payload employed techniques like runner memory scraping, privilege escalation via bind mounts, dual-channel exfiltration through HTTPS and Git Data API, and SLSA provenance forgery. The library helps identify affected systems and pin safe package versions. → microsoft.com |
| 2026-05-20 2026 | Shai-Hulud: What to Know About the Malware Spreading Through Software Pipelines beginner 4 min read | Library Shai-Hulud is a malware campaign spreading through software pipelines, impacting approximately 320 npm and PyPI packages. It abuses trusted workflows like GitHub Actions, affecting major entities including OpenAI, Microsoft, and Mistral AI. This threat exploits the reliance on third-party code, allowing attackers to gain access to downstream projects, steal credentials (cloud, crypto wallet, SSH keys), and enlist machines into botnets, posing a significant risk to enterprise systems beyond developer environments. |
| 2026-05-20 2026 | GitHub breached via a malicious VS Code extension: why developer devices are the real target news 3 min read | Library for on-device application security, Aikido Device Protection, combats threats from trusted developer tooling like VS Code extensions. It features real-time malware blocking by checking against a live feed and a configurable minimum age policy, preventing installation of recently published or updated packages within a set timeframe. This approach protects against attacks like the compromised Nx Console extension and Durable Task Python SDK by enforcing security at the workstation, independent of network controls and beyond the scope of traditional EDR solutions. → aikido.dev |
| 2026-05-20 2026 | GitHub says internal repositories were taken in poisoned VS Code extension attack news 3 min read | Attack detailing a supply chain compromise where a poisoned Visual Studio Code extension, specifically a trojanized version of Nx Console, led to the exfiltration of GitHub's internal repositories. This incident highlights the risks associated with third-party developer tools, as compromised extensions operating within development environments can gain access to sensitive source code, credentials, and build systems, with a hacking group claiming responsibility for the attack. → cyberscoop.com |
| 2026-05-20 2026 | Pip 26.1 Ships Dependency Cooldowns and Experimental Lockfile Support to Combat Supply Chain Attacks news 3 min read | Library update, Pip 26.1, introduces dependency cooldowns to mitigate supply chain attacks by enforcing installation delays for new packages, drawing on analysis of past incidents like those affecting Essential Plugin and XZ Utils. It also adds experimental support for PEP 751 pylock.toml lockfiles, expanding adoption beyond uv. The release addresses CVE-2026-3219 and CVE-2026-6357, and updates vendored urllib3 to resolve three additional CVEs. → infoq.com |
| 2026-05-19 2026 | Hackers have compromised dozens of popular open source packages in an ongoing supply chain attack news 1 min read | Library for detecting compromised open source packages, focusing on supply chain attacks like "Mini Shai-Hulud." This library helps identify malicious updates pushed to downstream users, such as those targeting Antv, a library by Alibaba, and TanStack, which impacted OpenAI employees by stealing credentials for services like password managers. |
| 2026-05-19 2026 | Bitsight Beacon: Supply Chain Exposure Management for the SOC beginner 3 min read | Tool for supply chain exposure management. Bitsight Beacon continuously monitors third-party environments for threats across the attack lifecycle, including infrastructure exposure, malicious activity, and post-compromise breach evidence. It correlates signals from attack surface intelligence, supply chain mapping, and threat intelligence to deliver validated alerts with IOCs, MITRE ATT&CK mappings, and remediation guidance, facilitating earlier detection and response between SOC and TPRM teams. |
| 2026-05-19 2026 | The @antv Ecosystem Was Compromised with Shai-Hulud Malware 300 Packages Affected news 3 min read | Library for detecting the Shai-Hulud npm malware, which compromises over 300 packages and affects millions of downloads. This self-propagating worm, suspected to be from TeamPCP, harvests credentials via malicious `preinstall` scripts, exfiltrates data disguised as OpenTelemetry, and uses stolen GitHub tokens to create public repositories with the beacon string "niagA oG eW ereH :duluH-iahS". Recommended actions include rotating keys, adding 2FA, and downgrading affected packages. → ox.security |
| 2026-05-19 2026 | What is Mini Shai-Hulud npm supply chain attack and was Microsoft and Socket hit by malware? Full explain beginner 5 min read | Analysis of the Mini Shai-Hulud npm supply chain attack details a worm-like campaign that compromised npm accounts to publish malicious package versions. This attack injected credential-stealing code, targeting GitHub tokens, AWS credentials, SSH keys, and more, using preinstall hooks to execute during installation. Microsoft Defender detected the malware, while Socket reported extensive compromise within the @antv ecosystem, highlighting risks to CI/CD pipelines and developer environments. The campaign leverages stolen tokens for propagation and could be linked to financially motivated groups. |
| 2026-05-19 2026 | The Worm That Keeps on Digging: TeamPCP Hits @antv in Latest Wave news 2 min read | Analysis of a coordinated software supply chain attack reveals malware targeting NPM packages within the @antv namespace, GitHub Actions like actions-cool/issues-helper, and the VSCode extension nrwl.angular-console v18.95.0. The campaign, attributed to "TeamPCP", leverages orphaned GitHub commits for payload hosting and uses `bun` for execution, stealing credentials and establishing persistence via a Python backdoor at `~/.local/share/kitty/cat.py`. The backdoor uses the trigger `firedalazer` for C2 communication, executing remote Python code. → wiz.io |
| 2026-05-19 2026 | One NPM accoun poisons over 600 packages with millions of weekly downloads in a new supply chain attack news | A threat actor compromised a single NPM account, injecting malicious code into over 600 packages. These poisoned packages, collectively downloaded millions of times weekly, represent a significant supply chain attack. The malware aims to steal environment variables, potentially exposing sensitive data like API keys and user credentials. This incident highlights the vulnerability of the NPM ecosystem and the widespread impact of compromised dependencies. → cybernews.com |
| 2026-05-19 2026 | GitHub Actions Supply Chain Attack Redirects Tags to Steal CI/CD Credentials news 2 min read | Library for detecting supply chain attacks against GitHub Actions, specifically detailing a compromise of the "actions-cool/issues-helper" and "actions-cool/maintain-one-comment" workflows. Threat actors redirected repository tags to malicious commits, exfiltrating CI/CD credentials by executing code that reads runner memory and makes outbound calls to attacker-controlled domains like "t.m-kosche[.]com". This technique, involving imposter commits, bypasses PR reviews and achieves arbitrary code execution, potentially linked to the Mini Shai-Hulud campaign targeting npm packages. → thehackernews.com |
| 2026-05-19 2026 | Mini Shai-Hulud Pushes Malicious AntV npm Packages via Compromised Maintainer Account news 4 min read | Library detailing the Mini Shai-Hulud software supply chain attack campaign, which leverages compromised npm maintainer accounts to inject credential-stealing payloads into popular packages like echarts-for-react and various @antv ecosystem modules. The campaign targets over 20 credential types, including AWS, Azure, and GitHub tokens, and utilizes techniques such as OIDC token abuse and Sigstore attestation forgery to mimic legitimate releases. The attack's payload exfiltrates data to actor-controlled domains and can propagate through stolen npm tokens by republishing trojanized package versions. → thehackernews.com |
| 2026-05-18 2026 | Shai-Hulud copycat hits another npm package news 3 min read | Library for identifying and mitigating supply chain attacks, specifically addressing threats like the Shai-Hulud copycat worm targeting npm packages. It also covers other stealer malware found within packages, highlighting the risks posed by malicious code inserted into widely used software components. The entry also touches on broader security concerns such as AI-assisted attacks on APIs and the vulnerability of open-source registries. → theregister.com |
| 2026-05-18 2026 | OpenAI macOS Products Impacted by TanStack Supply Chain Attack via Mini Shai-Hulud Malware in TeamPCP Campaign news 6 min read | Writeup on the TanStack supply chain attack, where the TeamPCP threat group used the Mini Shai-Hulud worm to compromise OpenAI's macOS products. Attackers injected malicious code into TanStack npm packages, stealing credentials from OpenAI employee devices. This incident highlights risks from compromised CI/CD pipelines and open-source dependencies, impacting multiple AI and software development organizations. OpenAI responded by rotating credentials and reviewing code-signing certificates. → rescana.com |
| 2026-05-18 2026 | First Shai-Hulud Worm Clones Emerge news 2 min read | Writeup detailing the emergence of Shai-Hulud worm clones following the release of its source code. The malware, previously used in supply chain attacks against NPM packages affecting developers, was adapted by threat actors and published in new NPM packages like 'chalk-tempalte'. These clones aim to steal credentials and API keys, propagating by injecting themselves into victim packages and publishing malicious versions, impacting users of Trivy, Bitwarden, Checkmarx, SAP, and TanStack. → securityweek.com |
| 2026-05-18 2026 | TanStack weighs invitation-only pull requests after supply chain attack news 3 min read | Library usage changes follow a supply chain attack on TanStack, a popular JavaScript utility library. After a malicious actor compromised an npm package, TanStack is exploring changes like invitation-only pull requests to enhance its security posture and prevent future incidents, underscoring the growing risks in open-source software development. → theregister.com |
| 2026-05-18 2026 | Forcepoint details TeamPCP supply chain attack that turned LiteLLM into a credential stealer news 3 min read | Library analysis detailing the TeamPCP supply chain attack that compromised LiteLLM versions 1.82.7 and 1.82.8. The attack leveraged a poisoned Trivy build, leading to credential theft including PYPI_PUBLISH tokens, OpenAI, Anthropic, Azure, and AWS API keys. Malicious payloads were embedded via proxy server modifications and a stealthy .pth file, enabling exfiltration of sensitive data and installation of a persistent backdoor. |
| 2026-05-18 2026 | Developer Workstations Are Now Part of the Software Supply Chain beginner 5 min read | Library of techniques and tools for securing developer workstations, recognizing them as a critical part of the software supply chain. The resource highlights how attackers target secrets like API keys and cloud credentials on these machines, as demonstrated in campaigns like "mini Shai Hulud" and TeamPCP. It emphasizes the importance of securing local context, managing credential exposure, and integrating security into AI-assisted development workflows to prevent attacks before they reach repositories and CI/CD pipelines. → thehackernews.com |
| 2026-05-16 2026 | OpenAI hit by supply chain attack linked to malicious TanStack packages news 2 min read | Library impacting OpenAI, TanStack, UiPath, and DraftLab highlights the Mini Shai-Hulud worm campaign. Attackers leveraged hijacked GitHub Actions OIDC tokens to distribute malicious npm packages, including 84 tied to TanStack, that stole secrets from CI/CD environments and developer tools like VS Code. The worm generated valid SLSA Level 3 attestations, making it appear legitimate, and led to credential exfiltration from two OpenAI employee devices, compromising internal source code repositories and code-signing certificates. → securityaffairs.com |
| 2026-05-16 2026 | Expired domain leads to supply chain attack on node-ipc npm package news 4 min read | Library for Node.js Inter-Process Communication compromised via expired domain and email takeover. Malicious versions of the popular `node-ipc` npm package (9.1.6, 9.2.3, 12.0.1) were published, bundling credential-stealing malware designed to exfiltrate sensitive data from CI/CD tools, cloud services, Kubernetes, and more via DNS TXT queries. The attack leveraged a dormant maintainer account whose associated domain had expired and was subsequently re-registered by attackers. → csoonline.com |
| 2026-05-15 2026 | Two Employee Devices Impacted By TanStack Supply Chain Attack news 3 min read | Library compromising TanStack npm was targeted by the Mini Shai-Hulud supply chain attack, impacting two employee devices and resulting in limited credential exfiltration from internal code repositories. OpenAI responded by isolating systems, rotating credentials, and updating security certificates for macOS applications by June 12 to prevent the distribution of fraudulent software. This incident highlights the vulnerability of shared software dependencies, prompting OpenAI to accelerate the deployment of security controls like package manager configurations with minimum release age requirements. |
| 2026-05-15 2026 | OpenAI Warns Mac Users to Update Apps After Supply-Chain Attack news | OpenAI has issued a warning to Mac users, advising them to update their applications promptly due to a supply-chain attack. This attack potentially compromised applications downloaded from unauthorized sources or modified by third parties. Users are urged to remove any suspect applications and reinstall them from official sources to mitigate the risk of malware or data theft. → techrepublic.com |
| 2026-05-15 2026 | OpenAI Hit by TanStack Supply Chain Attack news 2 min read | Writeup of the TanStack supply chain attack, detailing how the TeamPCP group compromised 42 packages and over 170 namespaces across NPM and PyPI. This coordinated campaign infected developer devices with the Shai-Hulud worm, leading to exfiltration of credential material from OpenAI's internal source code repositories via two employee devices. OpenAI responded by rotating credentials, revoking sessions, restricting workflows, and revoking/re-signing code-signing certificates for multiple platforms. → securityweek.com |
| 2026-05-15 2026 | The software supply chain is the new ground zero for enterprise cyber risk. Don't get caught short beginner 4 min read | Analysis of recent AI-driven software supply chain attacks, including the TeamPCP breach targeting LiteLLM, Trivy, and Checkmarx, highlights the urgent need to treat AI middleware as critical infrastructure. The article emphasizes securing developer workflows, modernizing risk management for AI applications, and implementing continuous monitoring for unauthorized connections and data exfiltration. It advocates for developer upskilling, AI governance tools, and adherence to organizational rulesets to mitigate risks from sophisticated AI-assisted threats. |
| 2026-05-15 2026 | TanStack Supply Chain Attack Hits Two OpenAI Employee Devices Forces macOS Updates news 4 min read | Library detailing a sophisticated supply chain attack campaign, prominently featuring the TanStack Mini Shai-Hulud worm. The attack targeted OpenAI, Mistral AI, and other vendors, leading to compromised macOS apps (ChatGPT Desktop, Codex App, Codex CLI, Atlas) requiring updates due to revoked signing certificates. The malware, delivered via compromised packages like guardrails-ai and mistralai, exhibits advanced capabilities including hardcoded C2 servers, fallback mechanisms like FIRESCALE, and exfiltration to GitHub repositories, while also incorporating destructive behaviors targeting specific geographic regions and exfiltrating AWS credentials across all availability zones. → thehackernews.com |
| 2026-05-15 2026 | OpenAI caught in TanStack npm supply chain chaos after employee devices compromised news 3 min read | Library detailing supply chain risks, including the OpenAI incident stemming from compromised employee devices impacting the TanStack npm package. It also touches upon AI agents' ability to create exploits, the strain agentic AI places on memory hierarchies, and the challenge of securing open-source registries with insufficient funding. The information highlights the evolving landscape of application security threats and the increasing reliance on AI. → theregister.com |
| 2026-05-15 2026 | OpenAI confirms exposure in recent Shai-Hulud supply-chain attack news 2 min read | Writeup of the Mini Shai-Hulud supply-chain attack impacting OpenAI, which involved compromised npm packages from TanStack and exposed limited internal credentials and code-signing certificates. The incident led OpenAI to rotate signing keys for its desktop applications and prompted macOS users to update software by June 12, 2026, to avoid disruptions. The attack leveraged techniques like cache poisoning and OpenID Connect token extraction to compromise repositories and harvest secrets. |